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Receive IP Frame Having Destination IP Address 
Different from Emulator 
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Pass IP Frame to Emulation Application(s) 
(Snooping or Passed by Kernel) 
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One Emulation Application Identifies 
Application Request (e.g., HTTP Get) 
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Identifying Emulation Application Generates Application Response 
(e.g., HTML Tag Data) 
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Identifying Emulation Application Generates Layer 4 Header - ■ — 48 



Identifying Emulation Application Generates IP Header: 
Response SA = Request DA 
Response DA = Request SA 
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IP Frame Sent to Raw Socket 
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Raw Socket Generates Ethernet Header, Supplies Ethernet 
Frame to Network Interface 
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Network Interface Sends Response IP Frame onto Network .—-56 



Figure 2 



